$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: gFeMdsZRuXHHlrXHXTxsNl7RzPygfNDAFOgorce2gxg= Subject key identifier: 6F:0B:E5:AE:24:96:FE:22:90:28:02:10:3F:F1:8E:66:43:44:95:33 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 079E Signing time: Thu 02 May 2024 22:19:16 +0000 Manifest this update: Thu 02 May 2024 22:19:16 +0000 Manifest next update: Thu 09 May 2024 22:19:16 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: +FsqU8DOaASxtU7atFcqCLAGQDZqpVOPxi6U043iNpI=) 2: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: UKM0uGo+2linmHil82GllN3C1fZGgnBOGPFeJwldB5E=) 3: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: cH+HNTdNPLB+Mpe8pDEkV7NrSte2+A6Fkurnr6HR0N4=) 4: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: yM7E0Nn3qoLSiHFRteQ7+peb1NbJYXPVsf0qTgGnnjQ=) 5: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: ndTFS2r0EnV/1WKrTkxafP1yrj/Cl22lQpmkunzynGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: May 2 22:19:16 2024 GMT Not After : May 9 22:19:16 2024 GMT Subject: CN=66341164-642b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:41:40:40:0e:b9:9b:fd:00:94:6e:ca:77: 5a:60:b9:b4:9d:8e:cc:c0:70:43:cd:40:12:bb:d1: 62:6e:70:46:18:01:ab:fd:f5:1c:b4:24:69:01:f4: 30:c7:ab:46:78:c3:d9:7e:d5:7c:d0:74:02:bc:37: 4b:46:b8:0c:48:b7:dc:14:3d:3e:97:91:c2:54:96: 87:05:9d:1d:a5:a8:23:69:a8:17:32:51:aa:77:e1: 19:15:95:e5:6d:e1:7b:13:7d:33:05:cb:21:3a:71: dc:9a:8c:f1:43:ed:52:6a:9e:90:2e:b9:32:11:1e: a8:13:1e:2b:77:90:59:59:e2:4e:e2:9d:7d:bc:a0: 03:1a:cf:4b:17:af:fb:f1:dc:9c:57:13:d4:47:99: bf:9c:dc:7f:e7:c6:40:ed:e8:37:61:28:9b:9b:49: 2c:26:2e:e4:d8:f8:ec:4f:01:8c:1b:c7:da:9a:c8: ff:a1:51:02:8d:e0:3e:63:c4:8d:ce:d7:48:6d:b8: a3:e2:32:a8:d5:6a:ea:a0:55:6f:3e:cb:f0:ec:05: ff:be:96:56:ca:03:3d:6b:9a:75:db:4e:24:e6:a3: b8:c8:36:a2:f6:08:57:27:2f:73:f0:ba:de:af:76: e3:fa:06:44:27:f3:04:65:1d:ef:a2:75:b9:e1:52: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:E5:AE:24:96:FE:22:90:28:02:10:3F:F1:8E:66:43:44:95:33 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b6:94:88:f3:a0:79:28:f1:2b:ff:b8:c0:bf:d2:53:ad:c7: 88:c7:dc:e4:6f:9c:b5:ba:9c:7d:5d:84:b4:89:9e:6a:7c:6e: c3:70:d7:00:a4:4a:da:fd:50:ad:7d:6c:5c:f4:eb:27:28:c0: 9a:b3:12:63:d5:79:a6:7b:25:eb:23:27:8c:1b:b2:02:5a:52: ef:7e:96:4c:27:a1:4c:c7:ff:23:23:0d:ea:8f:11:88:da:70: 27:b0:b3:7c:71:4e:07:b2:01:9f:65:da:c9:02:0d:39:7a:25: d1:32:40:f8:c2:4c:c6:f6:a0:0a:a5:51:05:67:7d:9a:de:d5: bf:34:94:b6:92:c9:55:16:d8:1b:39:99:6f:4f:25:1d:b9:8b: 90:a9:5d:9a:61:a5:79:7a:c8:13:ff:65:96:75:65:7c:5f:cc: a7:83:be:b9:7e:d0:7c:13:b6:f5:25:6d:4a:a1:4f:ea:79:6d: 28:2b:75:be:b5:70:51:c7:a5:02:9c:d4:86:89:bf:3d:09:b1: cd:b0:87:8e:d6:30:e6:e6:82:2c:62:f1:6a:65:4c:2f:ca:37: 5d:10:f6:28:29:2a:71:bd:a1:42:f2:fd:f6:4c:78:8c:2c:c7: 2e:ff:50:2f:42:64:9c:77:70:02:6b:f5:03:df:fd:e5:34:c4: 1d:aa:88:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjQwNTAyMjIxOTE2WhcNMjQwNTA5MjIxOTE2WjAYMRYwFAYD VQQDEw02NjM0MTE2NC02NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkxBQEAOuZv9AJRuyndaYLm0nY7MwHBDzUASu9FibnBGGAGr/fUctCRpAfQw x6tGeMPZftV80HQCvDdLRrgMSLfcFD0+l5HCVJaHBZ0dpagjaagXMlGqd+EZFZXl beF7E30zBcshOnHcmozxQ+1Sap6QLrkyER6oEx4rd5BZWeJO4p19vKADGs9LF6/7 8dycVxPUR5m/nNx/58ZA7eg3YSibm0ksJi7k2PjsTwGMG8famsj/oVECjeA+Y8SN ztdIbbij4jKo1WrqoFVvPsvw7AX/vpZWygM9a5p1204k5qO4yDai9ghXJy9z8Lre r3bj+gZEJ/MEZR3vonW54VJ9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8L5a4k lv4ikCgCED/xjmZDRJUzMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9tpSI86B5KPEr/7jAv9JTrceIx9zkb5y1upx9XYS0iZ5qfG7DcNcA pEra/VCtfWxc9OsnKMCasxJj1XmmeyXrIyeMG7ICWlLvfpZMJ6FMx/8jIw3qjxGI 2nAnsLN8cU4HsgGfZdrJAg05eiXRMkD4wkzG9qAKpVEFZ32a3tW/NJS2kslVFtgb OZlvTyUduYuQqV2aYaV5esgT/2WWdWV8X8yng765ftB8E7b1JW1KoU/qeW0oK3W+ tXBRx6UCnNSGib89CbHNsIeO1jDm5oIsYvFqZUwvyjddEPYoKSpxvaFC8v32THiM LMcu/1AvQmScd3ACa/UD3/3lNMQdqog7 -----END CERTIFICATE-----Generated at Thu May 2 23:19:00 2024 by rpki-client on console-ams.rpki-client.org